Ronin Bridge
Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →
anchored·4LrD8K…RvogSummary
Ronin Bridge is the cross-chain bridge that connected the Axie Infinity gaming ecosystem's Ronin sidechain to Ethereum, operated by Sky Mavis. In March 2022 it suffered the largest DeFi hack in history at the time — $625 million in ETH and USDC stolen by North Korea's Lazarus Group via compromised validator private keys obtained through social engineering. A second, smaller exploit occurred in August 2024. The legacy bridge was deprecated in April 2025 and migrated to Chainlink CCIP infrastructure.
Connected Entities
9 entities · 60 linked investigations- Ronin Bridge→mentioned with→USDD(60%)
- Ronin Bridge→mentioned with→Chainlink(70%)
- Ronin Bridge→mentioned with→Ethereum(80%)
- Ronin Bridge→mentioned with→Binance(65%)
- Axie Infinity→mentioned with→Binance(70%)
- Axie Infinity→mentioned with→Chainlink(60%)
- Binance→mentioned with→Ethereum(65%)
- Axie Infinity→mentioned with→Ronin Bridge(90%)
- Axie Infinity→mentioned with→Ethereum(80%)
- Chainlink→mentioned with→Ethereum(65%)
- + 18 more
Timeline(14 events)
November 2021
Axie DAO temporarily delegates validator signing authority to Sky Mavis to handle high transaction volume.
December 2021
Axie DAO delegation program expires, but Sky Mavis's signing permissions over the Axie DAO validator are never revoked.
23 March 2022
Attackers use compromised private keys for four Sky Mavis validators plus residual Axie DAO signing access to steal 173,600 ETH and 25.5M USDC ($625M) from the Ronin Bridge. The attack goes undetected.
29 March 2022
Ronin Network publicly discloses the exploit after a user reports an inability to withdraw 5,000 ETH. Bridge operations are halted.
6 April 2022
Sky Mavis announces a $150M fundraising round led by Binance, with a16z, Animoca Brands, Paradigm, and Accel participating, to reimburse hack victims.
14 April 2022
The FBI and U.S. Treasury OFAC officially attribute the attack to North Korea's Lazarus Group and APT38. OFAC sanctions the attacker's Ethereum wallet address (0x098B716B8Aaf21512996dC57EB0615e2383E2f96).
28 June 2022
Ronin Bridge relaunches after security audits by Verichains and CertiK. All affected users are fully reimbursed. Validator set expanded to 11 nodes with plans for 21+.
6 July 2022
Reports reveal the initial attack vector: a fraudulent LinkedIn job offer led a senior Sky Mavis engineer to download a malicious PDF containing spyware.
8 August 2022
OFAC sanctions Tornado Cash, citing over $455M in Ronin Bridge proceeds laundered through the mixer as a primary justification.
8 September 2022
Chainalysis and U.S. law enforcement announce seizure of more than $30M in stolen Ronin funds — the first-ever seizure of DPRK-stolen cryptocurrency. Total recovered reaches approximately $35.8M.
6 August 2024
A second Ronin Bridge exploit occurs: a contract initialization error during a V2 upgrade sets minimumVoteWeight to zero. MEV bots acting as white hats capture approximately $12M (4,000 ETH and USDC). Bridge is halted.
14 August 2024
White hat MEV operators return the $12M in full. Sky Mavis awards a $500,000 bug bounty. Beosin and Verichains complete security audits; bridge reopens.
December 2024
Chainlink CCIP goes live on Ronin Network, beginning the migration away from the legacy bridge infrastructure.
April 2025
Legacy Ronin Bridge formally deprecated. Full migration of $450M+ in assets across 12 token types to Chainlink CCIP is complete.
Decision Log
- slot 456641471 · hash 31ac962nMPbyHUeeKyneeDHi1nenShHA2qyYx2APjuKX
- slot 426699703 · hash 8x8Y8ZHLbjYsfkkZcBLFH9d5EbB5f6WMjh93NzPNxpiK
- slot 426699700 · hash 4sVDg7Q8aXS4ZdHvunkWQznswfLEMamNvwJuF1E1W3P6
- slot 421077020 · hash E15jbtw7dtLMzo7LwrU3X59yNaBpgJ4uubefJQxE4R3L
This investigation is cryptographically anchored to the Solana blockchain (4 decisions). 21 of 22 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-5
generated: 5/4/2026, 2:54:50 AM
last updated: 8/29/2026, 1:34:39 AM
11 viewsavoid.net — verified advice for a post-truth world